Analysis

  • max time kernel
    141s
  • max time network
    19s
  • platform
    windows7_x64
  • resource
    win7-20240704-en
  • resource tags

    arch:x64arch:x86image:win7-20240704-enlocale:en-usos:windows7-x64system
  • submitted
    12-08-2024 02:23

General

  • Target

    8cf0ae1cfc8de281451eca29d5db49bc_JaffaCakes118.exe

  • Size

    1.6MB

  • MD5

    8cf0ae1cfc8de281451eca29d5db49bc

  • SHA1

    aa73d1a2eb1eb8bfda37250ae8349a7013be43fa

  • SHA256

    815ccee0538f14d93d4e2ae47472f59129b272301557af7c44dcdeab491251d2

  • SHA512

    6691f1d1eb28151839c37ca856645d536553f1202d6b9ccfd16bf80ff55f2f4d647073222f606b55fc09130e0e5850d0bd8b0791748bbfea9dfccd2eb1eeb0f5

  • SSDEEP

    49152:myAvBG605HSUVaOgWd6DimBaucOU7m6Ntvge:myUBbeHDkTANOU7zvN

Score
3/10

Malware Config

Signatures

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

Processes

  • C:\Users\Admin\AppData\Local\Temp\8cf0ae1cfc8de281451eca29d5db49bc_JaffaCakes118.exe
    "C:\Users\Admin\AppData\Local\Temp\8cf0ae1cfc8de281451eca29d5db49bc_JaffaCakes118.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    PID:1052

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • memory/1052-9-0x0000000000290000-0x0000000000291000-memory.dmp

    Filesize

    4KB

  • memory/1052-8-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-7-0x0000000000350000-0x0000000000351000-memory.dmp

    Filesize

    4KB

  • memory/1052-6-0x0000000000310000-0x0000000000311000-memory.dmp

    Filesize

    4KB

  • memory/1052-5-0x00000000003E0000-0x00000000003E1000-memory.dmp

    Filesize

    4KB

  • memory/1052-4-0x0000000000270000-0x0000000000271000-memory.dmp

    Filesize

    4KB

  • memory/1052-3-0x0000000000340000-0x0000000000341000-memory.dmp

    Filesize

    4KB

  • memory/1052-2-0x0000000000280000-0x0000000000281000-memory.dmp

    Filesize

    4KB

  • memory/1052-1-0x00000000002B0000-0x0000000000310000-memory.dmp

    Filesize

    384KB

  • memory/1052-0-0x0000000000400000-0x000000000085C000-memory.dmp

    Filesize

    4.4MB

  • memory/1052-22-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-23-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-21-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-20-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-19-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-42-0x0000000000260000-0x0000000000261000-memory.dmp

    Filesize

    4KB

  • memory/1052-41-0x0000000000250000-0x0000000000251000-memory.dmp

    Filesize

    4KB

  • memory/1052-40-0x00000000034F0000-0x00000000034F2000-memory.dmp

    Filesize

    8KB

  • memory/1052-39-0x0000000000890000-0x0000000000891000-memory.dmp

    Filesize

    4KB

  • memory/1052-38-0x00000000009B0000-0x00000000009B1000-memory.dmp

    Filesize

    4KB

  • memory/1052-37-0x0000000000990000-0x0000000000991000-memory.dmp

    Filesize

    4KB

  • memory/1052-36-0x0000000000950000-0x0000000000951000-memory.dmp

    Filesize

    4KB

  • memory/1052-35-0x00000000009D0000-0x00000000009D1000-memory.dmp

    Filesize

    4KB

  • memory/1052-34-0x0000000000960000-0x0000000000961000-memory.dmp

    Filesize

    4KB

  • memory/1052-33-0x0000000000970000-0x0000000000971000-memory.dmp

    Filesize

    4KB

  • memory/1052-32-0x0000000000920000-0x0000000000921000-memory.dmp

    Filesize

    4KB

  • memory/1052-31-0x0000000000860000-0x0000000000861000-memory.dmp

    Filesize

    4KB

  • memory/1052-30-0x00000000008A0000-0x00000000008A1000-memory.dmp

    Filesize

    4KB

  • memory/1052-29-0x00000000008D0000-0x00000000008D1000-memory.dmp

    Filesize

    4KB

  • memory/1052-28-0x0000000000870000-0x0000000000871000-memory.dmp

    Filesize

    4KB

  • memory/1052-27-0x0000000000880000-0x0000000000881000-memory.dmp

    Filesize

    4KB

  • memory/1052-26-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1052-25-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB

  • memory/1052-24-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-18-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-17-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-16-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-15-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-14-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-13-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-12-0x0000000000330000-0x0000000000331000-memory.dmp

    Filesize

    4KB

  • memory/1052-11-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-10-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-43-0x0000000000400000-0x000000000085C000-memory.dmp

    Filesize

    4.4MB

  • memory/1052-44-0x00000000002B0000-0x0000000000310000-memory.dmp

    Filesize

    384KB

  • memory/1052-46-0x0000000003500000-0x0000000003501000-memory.dmp

    Filesize

    4KB

  • memory/1052-47-0x00000000034F0000-0x00000000034F1000-memory.dmp

    Filesize

    4KB